You can always count on a 0-day rearing its head on a Friday, the week before Defcon. This time, it looks bad and wide-spread. See this WP article. From the article:
I reached out to Flake for additional information, but he told me that shortly after he published that blog post he received a 3 a.m. phone call from Microsoft asking him please not to comment further.
it will be interesting to see where this bug pops up given that the flaw is in a library that 3rd party developers use to build their applications.